$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4TnJFd9HL4bPX5kss7aY_Lv0LWI.roa File: 4TnJFd9HL4bPX5kss7aY_Lv0LWI.roa (raw, json) Hash identifier: zC5QNlxa8VPYWb3gS4aTot/ccrFhjygC3rXw2MmUvpE= Subject key identifier: E1:39:C9:15:DF:47:2F:86:CF:5F:99:2C:B3:B6:98:FC:BB:F4:2D:62 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 137B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4TnJFd9HL4bPX5kss7aY_Lv0LWI.roa Signing time: Fri 01 Sep 2023 09:25:00 +0000 ROA not before: Fri 01 Sep 2023 09:25:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 218.210.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4987 (0x137b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E139C915DF472F86CF5F992CB3B698FCBBF42D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:51:ac:83:cd:38:76:88:48:a8:a0:78:cd: 59:81:35:75:87:97:fe:6c:1f:b8:5e:d2:06:25:0c: 30:95:ea:2d:19:21:d5:9d:40:1d:cc:90:ba:77:ea: 7e:d5:72:61:3c:e6:49:aa:80:34:07:de:a6:e4:67: 66:b2:63:ef:22:dd:1f:9a:ad:65:93:f2:c0:19:a8: 2c:0a:15:c7:56:ac:b4:1c:38:39:db:89:4e:3f:d9: 69:db:36:a6:42:a8:10:87:e6:34:2b:37:c4:e9:fe: 0c:69:f1:cb:3d:45:31:2d:50:95:36:b5:b5:66:2b: 89:72:cd:bb:77:51:e9:e8:0f:50:98:0f:1a:78:0f: 11:34:4e:e7:cb:23:28:b1:40:b0:35:3f:4f:1a:66: f9:82:c1:6a:7c:4c:ea:e1:8c:81:ba:69:ce:95:14: 84:fd:a0:97:2c:fb:58:63:ed:a3:a2:56:95:a6:59: f3:82:ed:df:2f:b0:f7:55:18:f2:ec:9d:f9:2c:36: 71:97:4f:67:1d:ec:ac:c0:d3:98:61:5b:e0:c2:2f: b3:61:00:a8:36:52:96:cf:20:b5:a2:fe:d5:0e:85: 26:26:8a:76:fa:1d:bd:60:10:ed:ad:d3:40:f6:a7: 01:5c:8b:52:aa:4e:8e:96:bd:f4:8d:dd:2d:7e:40: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:39:C9:15:DF:47:2F:86:CF:5F:99:2C:B3:B6:98:FC:BB:F4:2D:62 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4TnJFd9HL4bPX5kss7aY_Lv0LWI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.210.0.0/15 Signature Algorithm: sha256WithRSAEncryption ab:61:3c:c9:1d:f4:b9:0b:6c:c3:57:93:dc:75:c3:f8:6d:59: 28:7a:c7:61:be:e5:fa:9f:1b:54:51:da:60:e1:db:35:56:5f: db:73:b2:a6:df:79:34:62:d4:93:34:97:b0:af:52:f7:5b:9e: d9:2e:43:d5:72:9b:b0:4e:b4:f1:fa:25:ae:49:51:98:70:3c: d7:bf:f4:70:b7:4d:10:3a:80:4b:7a:eb:63:44:5d:35:99:61: cc:60:ef:e9:3c:6c:70:fe:86:31:d0:97:59:5a:81:db:e9:7f: f6:d0:d6:52:29:39:a4:39:2c:7b:41:db:43:bc:36:cb:1e:a6: a2:f7:bb:21:b6:2b:e6:cc:50:e5:72:c0:ae:78:30:9b:0c:91: 65:05:cf:04:61:60:2b:8b:3e:51:c2:3b:79:50:ee:b2:e7:c8: 28:1d:6a:cb:7e:1d:d0:7d:e0:da:f0:c7:ad:68:13:86:09:24: e8:6a:d6:6a:03:2a:b8:33:5c:b4:e7:f0:e3:a5:cd:b4:76:28: 86:01:9b:77:9f:d5:59:bd:f4:d0:9f:22:b3:05:8d:94:ae:15: a0:bc:88:29:ce:a6:09:ea:8f:7d:95:d4:f6:73:2b:cf:2f:19: 9a:2b:be:18:de:67:4a:0c:ef:ec:e9:be:5c:d2:aa:3a:25:df: 57:4b:5c:12 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE3swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUxMzlDOTE1REY0NzJG ODZDRjVGOTkyQ0IzQjY5OEZDQkJGNDJENjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0NVGsg804dohIqKB4zVmBNXWHl/5sH7he0gYlDDCV6i0ZIdWd QB3MkLp36n7VcmE85kmqgDQH3qbkZ2ayY+8i3R+arWWT8sAZqCwKFcdWrLQcODnb iU4/2WnbNqZCqBCH5jQrN8Tp/gxp8cs9RTEtUJU2tbVmK4lyzbt3UenoD1CYDxp4 DxE0TufLIyixQLA1P08aZvmCwWp8TOrhjIG6ac6VFIT9oJcs+1hj7aOiVpWmWfOC 7d8vsPdVGPLsnfksNnGXT2cd7KzA05hhW+DCL7NhAKg2UpbPILWi/tUOhSYminb6 Hb1gEO2t00D2pwFci1KqTo6WvfSN3S1+QMBnAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU4TnJFd9HL4bPX5kss7aY/Lv0LWIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNFRuSkZkOUhMNGJQWDVrc3M3YVlf THYwTFdJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAdrSMA0G CSqGSIb3DQEBCwUAA4IBAQCrYTzJHfS5C2zDV5PcdcP4bVkoesdhvuX6nxtUUdpg 4ds1Vl/bc7Km33k0YtSTNJewr1L3W57ZLkPVcpuwTrTx+iWuSVGYcDzXv/Rwt00Q OoBLeutjRF01mWHMYO/pPGxw/oYx0JdZWoHb6X/20NZSKTmkOSx7QdtDvDbLHqai 97shtivmzFDlcsCueDCbDJFlBc8EYWAriz5Rwjt5UO6y58goHWrLfh3QfeDa8Met aBOGCSToatZqAyq4M1y05/Djpc20diiGAZt3n9VZvfTQnyKzBY2UrhWgvIgpzqYJ 6o99ldT2cyvPLxmaK74Y3mdKDO/s6b5c0qo6Jd9XS1wS -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:37 2024 by rpki-client on console-ams.rpki-client.org